[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: ISAKMP DOI Question (General, Not IP Specific)



-----BEGIN PGP SIGNED MESSAGE-----


On Thu, 19 Dec 1996, Bill Sommerfeld wrote:

>
>Actually, AH/ESP SPI's are not particularly convenient names for SA's
>from the point of view of applications.
>

We implemented it the following way:

1. Each incomming (local) SPI is bound to an outgoing SPI.
2. All SAs are identified by the local SPI
3. ISAKMP makes sure that each local SPI exists only once
   for all SPI spaces.

To avoid unecessary discussion let me mention again this
is implementation dependend.

Oliver


-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv

iQCVAwUBMrqiTDnVPgUZ7uZJAQGlaAQAvdqkezROijS0khWvQ9pFOQKhhj6nuFcn
P700+sJbcW0sxwt9u+FUVmGQS2uktagpnFDT3fVKXkjZniw5Vbgw0pAEng/VqlwK
iP99mcuxVMQ+I0eT7xbQHFdIOrTzlsJVBLzfA9x54tucRCPoT+/dkcOlrI8hn/af
1c0T4zb4VXo=
=1GDq
-----END PGP SIGNATURE-----



Follow-Ups: References: